View on GitHub

DNSViz: A DNS visualization tool

www.bbc.com

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
  8. |?|
  9. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (3)
  • bbc.map.fastly.net/A
  • www-bbc-com.bbc.net.uk/CNAME
  • www.bbc.com/CNAME
Secure (5)
  • com/SOA
  • com/SOA
  • net.uk/SOA
  • net/SOA
  • net/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (16)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 26116)
  • NSEC3 proving non-existence of bbc.com/DS
  • NSEC3 proving non-existence of bbc.net.uk/DS
  • NSEC3 proving non-existence of fastly.net/DS
  • com/DNSKEY (alg 8, id 30909)
  • com/DNSKEY (alg 8, id 31510)
  • com/DS (alg 8, id 30909)
  • net.uk/DNSKEY (alg 8, id 7686)
  • net.uk/DS (alg 8, id 7686)
  • net/DNSKEY (alg 8, id 15314)
  • net/DNSKEY (alg 8, id 35886)
  • net/DS (alg 8, id 35886)
  • uk/DNSKEY (alg 8, id 43056)
  • uk/DNSKEY (alg 8, id 43876)
  • uk/DS (alg 8, id 43876)

Delegation statusDelegation status

Insecure (3)
  • com to bbc.com
  • net to fastly.net
  • net.uk to bbc.net.uk
Secure (4)
  • . to com
  • . to net
  • . to uk
  • uk to net.uk

NoticesNotices

Errors (1)
  • bbc.net.uk/DNSKEY: The response (51 bytes) was malformed. (212.58.224.6, 212.58.225.6, 212.58.230.200, UDP_-_EDNS0_512_D_K)
Warnings (2)
  • net.uk to bbc.net.uk: The following NS name(s) were found in the delegation NS RRset (i.e., in the net.uk zone), but not in the authoritative NS RRset: ns0.tcams.bbc.co.uk See RFC 1034, Sec. 4.2.2.
  • www-bbc-com.bbc.net.uk/CNAME: The response (72 bytes) was malformed until EDNS was disabled. See RFC 6891, Sec. 6.2.6. (212.58.224.6, 212.58.225.6, 212.58.230.200, UDP_-_EDNS0_4096_D_K)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph